osb-node - npm Package Compare versions
Comparing version
@@ -8,3 +8,3 @@ { | ||
| ], | ||
| "version": "0.0.4", | ||
| "version": "0.1.0", | ||
| "author": "Atlassian", | ||
@@ -27,3 +27,3 @@ "repository": { | ||
| "dependencies": { | ||
| "ajv": "^5.3.0" | ||
| "ajv": "^8.10.0" | ||
| }, | ||
@@ -50,3 +50,3 @@ "devDependencies": { | ||
| "sinon-chai": "^2.14.0", | ||
| "typescript": "^3.5.2" | ||
| "typescript": "^4.6.2" | ||
| }, | ||
@@ -53,0 +53,0 @@ "engines": { |
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Fixed alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
No README
QualityPackage does not have a README. This may indicate a failed publish or a low quality package.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
285295
20.09%- Number of package files
174
64.15%- Lines of code
3886
116.61%- Number of medium quality alerts
1
-50%- Number of lines in readme file
214
Infinity%Worsened metrics
- Number of low supply chain risk alerts
1
Infinity%- Number of medium supply chain risk alerts
3
50%Dependency changes
+ Added
ajv@8.17.1(transitive)+ Added
fast-deep-equal@3.1.3(transitive)+ Added
fast-uri@3.0.6(transitive)+ Added
json-schema-traverse@1.0.0(transitive)+ Added
require-from-string@2.0.2(transitive)- Removed
ajv@5.5.2(transitive)- Removed
co@4.6.0(transitive)- Removed
fast-deep-equal@1.1.0(transitive)- Removed
fast-json-stable-stringify@2.1.0(transitive)- Removed
json-schema-traverse@0.3.1(transitive)Updated
ajv@^8.10.0